--- title: "Data Privacy and PII Handling in Mirror" slug: "data-privacy-and-pii-handling-in-mirror" updated: 2026-06-09T05:04:53Z published: 2026-06-09T05:04:53Z canonical: "support.whatfix.com/data-privacy-and-pii-handling-in-mirror" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.whatfix.com/llms.txt > Use this file to discover all available pages before exploring further. # Data Privacy and PII Handling in Mirror ### Overview When you capture a Mirror Screen, Whatfix stores the on-screen content to create interactive simulations for learners. The captured content might include personal or confidential information visible on the screen at the time of capture. Mirror provides the [Enhanced Screen Editing Experience](/mirror/docs/edit-and-manage-mirror-screens), which enables you to edit screen content and redact Personally Identifiable Information (PII) before and after you capture a Mirror. Additionally, Smart Edits detects and surfaces potential PII across screens that have already been captured, so you can review and redact sensitive information for the displayed simulation. > [!WARNING] > Note: > > The Enhanced Screen Editing Experience is a Beta feature. To enable this feature, contact your Customer Success Manager. For more information, see [Edit and Manage Mirror Screens](/mirror/docs/edit-and-manage-mirror-screens). For more information on what Mirror captures and how captured data is stored, see [Whatfix Security Overview](/mirror/docs/whatfix-security-overview). ### Editing Before Screen Capture Before you capture a Mirror Screen, you can edit or redact on-screen content. This includes both text and image-related edits. Any edit you make to on-screen content is treated as a PII edit. When you edit any content before you capture a Mirror Screen, the original Document Object Model (DOM) is removed before it leaves your browser. Mirror does not store the original DOM for such edits. Instead, a masked version of the original and the replacement value are stored in encrypted form to enable the edit to be applied across other screens. If you capture a Mirror Screen without editing any content on the screen, the DOM is stored in its original state at the time of capture. > [!WARNING] > Note: > > To prevent sensitive content from being stored, you must edit and redact the content before you capture a screen. Once a screen is captured, the original DOM is stored regardless of any edits you make afterward. ### PII Detection with Smart Edits > [!WARNING] > Note: > > Smart Edits is a Beta feature that is available only on Cloud deployments. To enable this feature, contact [support@whatfix.com](mailto:support@whatfix.com). For more information, see [Smart Edits in Mirror](/mirror/docs/smart-edits-in-mirror). Whatfix enables you to identify categories of sensitive data on captured Mirror Screens using Smart Edits. When enabled, Smart Edits analyzes your captured screens, highlights elements that might contain sensitive information, and provides AI-powered suggestions to redact or replace them. Mirror automatically scans each captured screen for commonly recognized PII patterns and flags potential matches for your review. If you capture a Mirror Screen without redacting all sensitive content, Smart Edits flags those screens for your review and highlights them with yellow borders. > [!NOTE] > Note: > > Smart Edits provides only recommendations. Any edit you make after you capture a Mirror Screen reflects in the simulation learners interact with, but the original captured DOM remains unchanged. > > ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Studio_Sensitive_information_detected.png?sv=2026-02-06&spr=https&st=2026-10-29T11%3A57%3A41Z&se=2026-10-29T12%3A57%3A41Z&sr=c&sp=r&sig=Vuv5HyJRbyY4eVbehnoQvtfF6%2Bk%2Ft9MuuONtdPXcgsM%3D) Smart Edits supports the following categories: **Identity documents and numbers** - Social Security Numbers (SSN) - Individual Taxpayer Identification Numbers (ITIN) - Aadhaar numbers - PAN card numbers - National Insurance Numbers (NIN) - US Passport numbers **Contact and personal information** - Email addresses - Phone numbers - Personal identifiers (such as names of employees, customers, or other individuals) - Contact information (such as addresses and other personal details) **Financial data** - Credit card numbers (Mastercard, Visa, American Express) - Financial data (such as bank account numbers and payment details) **Dates and technical identifiers** - Dates (such as birthdates or appointment dates) - IPv4 and IPv6 addresses - MAC addresses - System log data (such as session IDs and transaction IDs that could enable tracking) **Visual content** - Images and media that might contain faces, IDs, or sensitive visuals ### Security Controls Captured content retained by Whatfix is encrypted at rest. Access to stored data is governed by Whatfix security policies and role-based access controls. For more information, see [Data Security and Privacy Policies for Whatfix AI features](/docs/data-security-and-privacy-policies-for-whatfix-ai-features). A replica of an application screen captured based on a UI element. Personally Identifiable Information (PII) is any information that can be used to identify an individual, such as: Names, addresses, social security numbers, telephone numbers, email addresses, bills, receipts, birth certificates, and lease information. The feature release stage in which functionality is made available to a limited group of users for testing and feedback. Beta features are generally stable but may still undergo changes before becoming Generally Available (GA). Your Customer Success Manager (CSM) is your direct contact for features involving specific customer agreements, such as using AI features. The Document Object Model (DOM) is the structure that defines how elements and content are organized on a web page. Whatfix Mirror uses the DOM to accurately recreate Mirror Screens.